DEFAULT_PERMISSION = ["view", "operate"]